Đang tải... (xem toàn văn)
Quản trị mạng
Dao Xuan Hung - Take Exam Exam questions 1 . Your absent minded junior administrator has enabled AAA authentication on the HanoiCTT network, but forgot to set the authentication. What will happen when a user try’s to login? Disallow a user from access to all resources after login. Allow any user to login without checking the authentication data. Record all access of resources and how long the user accessed each resource. Allow a user to access all resources after login. Not to record any access of resources after login. Disallow any user from logging in with or without a valid username and password. 2 . You are tasked with configuring authentication on one of the HanoiCTT routers. Which of the following authentication protocols exchanges information between the client and the server using UDP? AAA RADIUS LCP TACACS+ All of the above 3 . Read and answer the question A B C D 4 . Which six AAA accounting types will a TACACS+/RADIUS server record? Network, interface, exec, protocol, system, and resource Resource, interface, connection, system, command, and network Command, system, exec, network, connection, and resource Connection, protocol, system, network, command, and resource Crypto, system, network, protocol, command, and resource 5 . What command would you use to enable AAA (Authentication, Authorization, Accounting) on a router? enable aaa set aaa aaa new-model aaa set 6 . ADSL broadband connections using the PPPoE access method typically uses which type of user authentication method? AAA authentication DNIS authentication Caller-ID authentication PPP CHAP authentication IPSec authentication L2TP authentication 7 . Some of the Cisco System locations are still using AppleTalk. What is true about RADIUS and TACACS+ compatibility with the AppleTalk Remote Access (ARA) protocol? (Choose all that apply.) RADIUS server is incapable of supporting AppleTalk Remote Access (ARA) protocol. TACACS+ server is incapable of supporting AppleTalk Remote Access (ARA) protocol. RADIUS server is capable of supporting AppleTalk Remote Access (ARA) protocol. TACACS+ server is capable of supporting AppleTalk Remote Access (ARA) protocol. Neither TACACS+ or RADIUS servers is capable of supporting AppleTalk Remote Access (ARA) protocol. All of the above. 8 . What is the default action of authentication when AAA is enabled but authentication is not set? Allow a user to access all resources after login. Disallow a user from access to all resources after login. Record all access of resources and how long the user accessed each resources. Not to record any access of resources after login. Allow any user to login without checking the authentication data. Disallow any user from logging in with or without a valid username and password. 9 . What is the purpose of the AAA server? Choose three. Authentication Authorization Accuracy Accounting 10 . What six types of accounting information does a TACACS+ / RADIUS server record? Connection, protocol, system, network, command, and resource Resource, interface, connection, system, command, and network Command, system, exec, network, connection, and resource Network, interface, exec, protocol, system, and resource Crypto, system, network, protocol, command, and resource None of the above 11 . Read and answer the question A B C D E F 12 . What feature enables tracking of services and the tracking of network resource consumption? PPP accounting AAA logging AAA accounting AAA insurance 13 . Which IOS command would you use on your router to specify a RADIUS server to take responsibility for authenticating dial-up clients? aaa radius server radius-server host ip aaa radius host aaa authentication radius-server 14 . What is authentication? Authentication is a security measure that is always one-way Authentication is a security measure that is always two-way Authentication verifies the identity of a user or system Authentication verifies the users or systems security measures 15 . You have just received a brand new Cisco router and need to configure auditing on it. What command would you use to enable auditing of the privileged mode access commands? aaa accounting enable 15 ip audit enable aaa accounting command 15 aaa accounting enable priv 16 . The three parts of CiscoSecure are: Stacker Compression AAA server Netscape Fastrack Relational Database (RDBMS) 17 . You have just received a brand new Cisco router and need to configure auditing on it. What command would you use to enable auditing of the privileged mode access commands? aaa accounting enable 15 ip audit enable aaa accounting command 15 aaa accounting enable priv 18 . Under which circumstance would use of Kerberos authentication system be required instead of TACACS+ or RADIUS? Authentication, authorization and accounting need to use a single Multiple level of authorization need to be applied to various router DES encrypted authentication is required. The usage of various router functions needs to be accounted for by user name 19 . AN IPSec secure tunnel is being built between routers LabA and LabB. In IPSec, what are the common services provided by Authentication Header (AH) and Encapsulation Security Payload (ESP)? Data origin authentication, confidentiality, and anti-replay service Confidentiality, data integrity, and anti-replay service Data integrity, data origin authentication, and anti-replay service Confidentiality, data integrity, and data origin authentication Confidentiality, data integrity and authorization. 20 . Read and answer the question A B C D E F Showing page 1 of 1 : 1Go! © 2004 HanoiCTT. All rights reserved. 123doc.vn